The Data-Confident Internal Auditor (Book)

📚 About 'The Data-Confident Internal Auditor' page. To clarify the purpose of this page and address recent inquiries. "The Data-Confident Internal Auditor" is a book. It is neither a service provider nor an employer. Here's what you can expect: - Read the book to enhance your data skills (for internal audits) - Access bonus resources to support your learning - Engage with content relevant to internal auditors. We appreciate your interest and hope this page, and the book, serve as valuable resources for your professional development.

Forensic Accountants - check out this role in our Sydney team with our growing national Forensic & Integrity Services practice. Cracker team and interesting work. Happy to answer any questions.

Ongoing education helps everyone understand their role in responsibly developing and using algorithmic systems. Regulators and standard-setting bodies emphasise the need for AI literacy. This article provides some examples of these. It also links to the related ForHumanity effort, open for participation. ForHumanity is a non-profit public charity dedicated to mitigating risk from AI, Algorithmic, and Autonomous (AAA) Systems.

The terminology – “audit” vs “review” - is important, but clarity about deliverables is more important when commissioning algorithm integrity assessments. Audits are formal, with an opinion or conclusion that can often be shared externally. Reviews come in various forms and typically produce recommendations, for internal use. Regardless of the terminology you use, when commissioning an assessment, clearly define and document the expected deliverable, including the report content and intended distribution, to ensure expectations are met.

Even small errors in algorithmic systems can lead to customer harm, financial losses, failure to meet contractual obligations or regulatory issues. Outcome-focused accuracy reviews offer more robust assurance than process-focused methods. They can catch translation errors, unintended consequences, and edge cases that process reviews might miss. This article explains why verifying outcomes is preferred over tracing through processes, and how it works.

I am excited to share that QAO is hiring for Information Systems Risk - Senior Specialist role.

We know these things anecdotally, but hard numbers really put things into perspective. I was looking at population stats and it - shouldn't have, but - surprised me a bit. Did you know just how few countries account for the majority of the world's population? Out of 195 countries recognised by the UN: •  2 (both in Asia) = just over a third (35%) of global population. Ok, this is India and China of course, not that surprising. But then: • 7 = Half (50%) • 17 = Two thirds (67%) • 35 = 80%. The remaining 160 countries make up less than 20%! (incl. Canada, Morocco, Malaysia, Australia, etc.)

Banks and insurers use external data in serving customers and making decisions; using them beyond their intended purpose can be risky (e.g. discriminatory). Emerging regulations and regulatory guidance emphasise the need for active oversight by boards, senior management to ensure responsible use of external data. Keeping the customer top of mind, asking the right questions, and focusing on the intended purpose of the data, can help reduce the risk. More in this article.

👉 6 text formatting hacks to make your dashboards clean and readable. I've put together a guide with six text formatting hacks to instantly improve the clarity and professionalism of your dashboards. From choosing the right fonts to getting numbers and dates just right, these tips will help you make your visualizations clear and good looking. 👉 Check out the guide below. If you find it useful, please share it with your network! #VizableVizTips #DataViz #DashboardDesign #TableauTips #DataVisualization #CleanDesign #Tableau #Datafam

The integrity of algorithmic systems goes beyond core algorithm accuracy and fairness. A key aspect of algorithm integrity is Security: the algorithmic system needs to be protected from unauthorised access, manipulation and exploitation. In this article, we explore an important sub-component of this: deprovisioning user access.